Senior Application Security Engineer

Join the Cat Digital Cybersecurity team in a hands-on role focused on embedding security into the application development lifecycle. You will partner with engineering and product leaders to help identify, validate, prioritize, remediate, and enable secure delivery through practical security testing and guidance.

Responsibilities

• Partner with application teams to analyze, validate, prioritize, and remediate security findings from automated and manual sources, including static and dynamic testing, penetration testing, and bug bounty programs.
• Provide practical, context-aware security guidance to software engineers, architects, product owners, and leaders; document key decisions and support teams in navigating applicable review and approval processes.
• Enable and monitor application security testing tools, including CodeQL and Rapid7, at the repository or application level in alignment with established processes.
• Coordinate application onboarding and scope for penetration tests and security assurance assessments, then manage resulting findings through the established defect-management process.
• Support application teams in improving security maturity using established scorecards and maturity models, and collaborate on correction-of-error reports to enable cross-team learning from recurring issues.

Required Qualifications

• Hands-on software engineering experience in any programming language or framework, with a demonstrated interest or experience in application security.
• Experience building or supporting web applications and APIs, including single-page applications and RESTful APIs, on a major cloud platform such as AWS, Microsoft Azure, Google Cloud, or Salesforce.
• Experience interpreting and helping remediate findings from static application security testing, dynamic application security testing, software composition analysis, penetration testing, or similar security-assurance methods.
• Working knowledge of secure-development resources such as the OWASP Top 10, MITRE Common Weakness Enumeration (CWE) Top 25, OWASP Application Security Verification Standard, or comparable industry guidance.

Preferred Qualifications

Relevant cloud, cybersecurity, or secure software development certifications are preferred, not required. Examples include AWS, Microsoft Azure, Google Cloud, Salesforce, CompTIA Security+, Cloud Security Alliance CCSK, or an ISC2 software security credential.

Technologies and Security Tools

• CodeQL, Rapid7
• Static application security testing, dynamic application security testing, penetration testing
• Bug bounty programs, software composition analysis
• OWASP Top 10, MITRE CWE Top 25, OWASP Application Security Verification Standard
• Single-page applications, RESTful APIs
• AWS, Microsoft Azure, Google Cloud, Salesforce

Compensation

Salary range: USD 112,710 - 183,140 per year.

Summary pay range: $112,710.00 - $183,140.00.

Location and Travel

• Chicago, IL (onsite)
• This position requires the candidate to be in Chicago, IL; Peoria, IL or Dallas, TX
• Travel: up to 10%

Employment Conditions

• Relocation assistance is not available for this position.
• Visa sponsorship is not available with this position.
• Any offer of employment is conditioned upon the successful completion of a drug screen.

Benefits

• Medical, dental, and vision benefits
• Paid time off plan (Vacation, Holidays, Volunteer, etc.)
• 401(k) savings plans
• Health Savings Account (HSA)
• Flexible Spending Accounts (FSAs)
• Health Lifestyle Programs
• Employee Assistance Program
• Voluntary Benefits and Employee Discounts
• Career Development
• Incentive bonus
• Disability benefits
• Life Insurance
• Parental leave
• Adoption benefits
• Tuition Reimbursement

Posting Dates

Any offer of employment is conditioned upon the successful completion of a drug screen.